Job description

About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. About the Role The Network Security Engineer will join the US Solutions Delivery team, implementing and supporting enterprise firewall and network security solutions across customer environments. This is a hands-on, delivery-focused role centered on Cisco ASA and FTD platforms, and NGFW deployments. The engineer owns assigned workstreams end-to-end - from lab validation through production cutover — and works closely with architects, project managers, and customer stakeholders. The engineer should be US Citizen and willingness to travel is required. Key Responsibilities Firewall Deployment & Operations Implement and configure enterprise firewall and network security solutions (NGFW/FTD, VPNs, NAT, NAC/ISE, SASE) in alignment with approved designs Manage and maintain firewall policies, including access rules, NAT, objects, zones, and security profiles following best practices Perform testing and validation of firewall rules and security configurations in lab or staging environments before production deployment Migration & Troubleshooting Support firewall migrations from Cisco ASA and third-party platforms to Cisco FTD Troubleshoot and resolve firewall and network security issues, including traffic drops, NAT issues, VPN failures, and routing/DNS/DHCP dependencies Identify and implement opportunities for optimization and automation, such as rule cleanup, standardization, and workflow improvements Execution & Coordination Collaborate with architects, senior engineers, and project managers to ensure accurate and timely solution delivery Participate in project sync-ups and technical discussions to understand requirements, scope, and deployment sequencing Take ownership of assigned tasks end-to-end, including escalation, root cause analysis (RCA), and issue resolution Documentation & Continuous Improvement Create and maintain comprehensive documentation, including firewall rules, network diagrams, VPN inventories, and operational runbooks Stay current on firewall platforms, SASE, Zero Trust, and network security practices, applying new learnings to day-to-day delivery work Basic Qualifications Candidate should be a US citizen. Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field 4-7 years of experience in cybersecurity, with a strong focus on firewall design and implementation 3+ years of hands-on experience designing and implementing Cisco ASA and Cisco FTD firewall environments or any third-party firewalls such as Palo Alto/Fortinet/Checkpoint experience with limited Cisco Firewall experience. Proven expertise in troubleshooting firewall and VPN connectivity issues, including NAT, routing, and policy-related problems Good understanding of NGFW features such as malware protection, threat detection, URL filtering, SSL decryption, and Intrusion Prevention Systems (IPS); hands-on experience preferred Experience working with multi-instance firewall environments Strong understanding of core networking concepts: TCP/IP, DNS, DHCP, subnetting, NAT, VPNs, and routing/switching fundamentals Willingness to travel across the U.S. to support customer deployments and firewall rollouts. Preferred Qualifications CCNP Security certification or equivalent demonstrated expertise Experience with Cisco Secure Access, Umbrella, or XDR platforms. Knowledge of Zero trust/SASE implementations. Knowledge of Cisco ISE for NAC/802.1X integration alongside firewall deployments Experience with security automation and scripting (Python, Ansible, APIs) CISSP, GIAC, or other industry-recognized security certifications Familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, NIST) Prior experience in a consulting, professional services, or partner-led delivery model Salary Range $80,000 - $150,000 USD + Benefits This is a full-time role with Gruve. Please note that Gruve does not provide visa sponsorship for this position; candidates must be U.S. citizens to apply. This is an on-site role based in Edison, New Jersey. ‍ Why Gruve At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you. Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.

Requirements

Must-haves

Firewall Deployment & Operations
Implement and configure enterprise firewall and network security solutions (NGFW/FTD, VPNs, NAT, NAC/ISE, SASE) in alignment with approved designs
Manage and maintain firewall policies, including access rules, NAT, objects, zones, and security profiles following best practices
Perform testing and validation of firewall rules and security configurations in lab or staging environments before production deployment
Migration & Troubleshooting
Support firewall migrations from Cisco ASA and third-party platforms to Cisco FTD
Troubleshoot and resolve firewall and network security issues, including traffic drops, NAT issues, VPN failures, and routing/DNS/DHCP dependencies
Identify and implement opportunities for optimization and automation, such as rule cleanup, standardization, and workflow improvements
Execution & Coordination
Collaborate with architects, senior engineers, and project managers to ensure accurate and timely solution delivery
Participate in project sync-ups and technical discussions to understand requirements, scope, and deployment sequencing
Take ownership of assigned tasks end-to-end, including escalation, root cause analysis (RCA), and issue resolution

Nice-to-haves

Good understanding of NGFW features such as malware protection, threat detection, URL filtering, SSL decryption, and Intrusion Prevention Systems (IPS); hands-on experience preferred
CCNP Security certification or equivalent demonstrated expertise
Experience with Cisco Secure Access, Umbrella, or XDR platforms.
Knowledge of Zero trust/SASE implementations.
Knowledge of Cisco ISE for NAC/802.1X integration alongside firewall deployments
Experience with security automation and scripting (Python, Ansible, APIs)
CISSP, GIAC, or other industry-recognized security certifications
Familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, NIST)
Prior experience in a consulting, professional services, or partner-led delivery model
$80,000 - $150,000 USD + Benefits
This is a full-time role with Gruve. Please note that Gruve does not provide visa sponsorship for this position; candidates must be U.S. citizens to apply. This is an on-site role based in Edison, New Jersey.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipython

Platform: greenhouse
Effort: quick